They have bad security, when you want to reset your password, they will send you an email with a new password. They should have send an email with a reset link not a password. Another thing is their auto-generated username, hackers can easily create a program where they can easily identify an existing username (keyword "user" + "random characters"), username should be a user-defined not predefined. If you have reset your password and you did not change it, that random generated password is also easy to know, the hacker just needs to test if the username and password are match. I would like to recommend that com2us should completely removed auto-generated password and username. Users who have those old username should be able to change their usernames and fill up some important fields just in case they got hacked again. For those who wants to play the game, they must register and add their credentials before playing the game. Most of the players here are spending their time and money, stop being lazy com2us.